@profoundlogic/coderflow-server 0.4.8 → 0.5.0

package/README.md

@@ -108,6 +108,12 @@ coder-server init mycompany-coder-setup
 
 This creates a `mycompany-coder-setup` directory with the required structure and initializes it as a git repository.
 
+Then configure the server to locate the setup directory using a command like this, specifying the path to the setup directory:
+
+```bash
+coder-server config set coder_setup_path mycompany-coder-setup
+```
+
 #### Install License
 
 ```bash
@@ -117,11 +123,13 @@ coder-server license set <your-license-key>
 #### Create Admin User
 
 ```bash
-coder-server create-user --username=admin --email=admin@example.com --name="Admin User" --role=admin
+coder-server create-user --username=admin --email=admin@example.com --name="Admin User" --admin
 ```
 
 You'll be prompted to set a password.
 
+On a brand-new install, the first created account is automatically granted Server Admin even without `--admin` (this policy is enforced in the shared user service, so it applies across CLI/API/OIDC auto-provisioning paths).
+
 #### Optional: Configure Server Listen Port and SSL
 
 By default the server listens on port 3000. To configure an alternate port (e.g. 443):

package/dist/README.md

@@ -108,6 +108,12 @@ coder-server init mycompany-coder-setup
 
 This creates a `mycompany-coder-setup` directory with the required structure and initializes it as a git repository.
 
+Then configure the server to locate the setup directory using a command like this, specifying the path to the setup directory:
+
+```bash
+coder-server config set coder_setup_path mycompany-coder-setup
+```
+
 #### Install License
 
 ```bash
@@ -117,11 +123,13 @@ coder-server license set <your-license-key>
 #### Create Admin User
 
 ```bash
-coder-server create-user --username=admin --email=admin@example.com --name="Admin User" --role=admin
+coder-server create-user --username=admin --email=admin@example.com --name="Admin User" --admin
 ```
 
 You'll be prompted to set a password.
 
+On a brand-new install, the first created account is automatically granted Server Admin even without `--admin` (this policy is enforced in the shared user service, so it applies across CLI/API/OIDC auto-provisioning paths).
+
 #### Optional: Configure Server Listen Port and SSL
 
 By default the server listens on port 3000. To configure an alternate port (e.g. 443):

package/dist/base-image/Dockerfile

@@ -126,10 +126,12 @@ RUN npm install -g @openai/codex @google/gemini-cli && \
 # System dependencies are already installed above (libasound2, libatk*, etc.)
 RUN su - coder -c "npx playwright install chromium"
 
-# Pre-install aitool and codermake globally and install licenses for coder user.
+# Pre-install aitool and codermake globally and install licenses for coder user and root.
 RUN npm install -g @profoundlogic/aitool @profoundlogic/codermake && \
-  su - coder -c "aitool --license-set PLX-7KM2D-QN8FX-W5HRP-BJ3TY-2026A" && \
-  su - coder -c "codermake --license-set PLX-4R8N5-KXJM3-DV7WT-YC2HP-2026A"
+    aitool --license-set PLX-7KM2D-QN8FX-W5HRP-BJ3TY-2026A && \
+    codermake --license-set PLX-4R8N5-KXJM3-DV7WT-YC2HP-2026A && \
+    su - coder -c "aitool --license-set PLX-7KM2D-QN8FX-W5HRP-BJ3TY-2026A" && \
+    su - coder -c "codermake --license-set PLX-4R8N5-KXJM3-DV7WT-YC2HP-2026A"
 
 # Install code-server for web-based VS Code
 RUN curl -fsSL https://code-server.dev/install.sh | sh && \

package/dist/base-image/entrypoint.sh

@@ -687,8 +687,8 @@ generate_task_json() {
     fi
 
     # Source environment variables set by setup script (e.g., IGNORE_LOCKFILE_CHANGES)
-    if [ -f ~/.bash_env ]; then
-        source ~/.bash_env
+    if [ -f /home/coder/.bash_env ]; then
+        source /home/coder/.bash_env
     fi
 
     # Generate patches and get repos_changed JSON
@@ -751,6 +751,74 @@ EOF
     log "Task metadata written to $TASK_OUTPUT_DIR/task.json"
 }
 
+# IBM i build library creation (called from main after repos are updated)
+setup_ibmi_build_library() {
+    # All five env vars must be set (via Docker Env from external-connections.js)
+    if [ -z "${IBMI_HOST}" ] || [ -z "${IBMI_USER}" ] || [ -z "${IBMI_KEY}" ] || [ -z "${IBMI_BUILD_PREFIX}" ] || [ -z "${IBMI_BUILD_HOME}" ]; then
+        return 0
+    fi
+
+    local IBMI_SSH_OPTS="-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=ERROR -o BatchMode=yes -T"
+
+    # Generate UUID suffix: strip dashes, remove version/variant nibbles, take first 24 chars
+    local IBMI_RAW_UUID=$(cat /proc/sys/kernel/random/uuid | tr -d '-')
+    local IBMI_BUILD_UUID=$(echo "${IBMI_RAW_UUID:0:12}${IBMI_RAW_UUID:13:3}${IBMI_RAW_UUID:17:15}" | head -c 24 | tr '[:lower:]' '[:upper:]')
+    IBMI_BUILD_SCHEMA="${IBMI_BUILD_PREFIX}_${IBMI_BUILD_UUID}"
+
+    log "Creating IBM i build library..."
+
+    # Create schema on IBM i via SSH + QShell db2
+    local IBMI_CMD_OUT
+    IBMI_CMD_OUT=$(echo "db2 \"CREATE SCHEMA ${IBMI_BUILD_SCHEMA}\"" | ssh -i ${IBMI_KEY} ${IBMI_SSH_OPTS} ${IBMI_USER}@${IBMI_HOST} qsh 2>&1)
+    if [ $? -ne 0 ]; then
+        log_error "${IBMI_CMD_OUT}"
+        log_error "Failed to create IBM i build library"
+        return 1
+    fi
+
+    # Resolve the system library name (10-char *LIB name)
+    IBMI_BUILD_LIBRARY=$(echo "db2 -S \"SELECT SYSTEM_SCHEMA_NAME FROM QSYS2.SYSSCHEMAS WHERE SCHEMA_NAME = '${IBMI_BUILD_SCHEMA}'\"" | ssh -i ${IBMI_KEY} ${IBMI_SSH_OPTS} ${IBMI_USER}@${IBMI_HOST} qsh 2>/dev/null | sed -n '4p' | tr -d '[:space:]')
+    if [ -z "${IBMI_BUILD_LIBRARY}" ]; then
+        log_error "Failed to resolve system library name for schema ${IBMI_BUILD_SCHEMA}"
+        return 1
+    fi
+
+    export IBMI_BUILD_LIBRARY
+    export IBMI_BUILD_SCHEMA
+
+    # Tag library with task ID for traceability
+    IBMI_CMD_OUT=$(echo "system \"QSYS/CHGOBJD OBJ(QSYS/${IBMI_BUILD_LIBRARY}) OBJTYPE(*LIB) TEXT('CoderFlow task ${TASK_ID}')\"" | ssh -i ${IBMI_KEY} ${IBMI_SSH_OPTS} ${IBMI_USER}@${IBMI_HOST} /QOpenSys/usr/bin/sh 2>&1)
+    if [ $? -ne 0 ]; then
+        log_error "${IBMI_CMD_OUT}"
+        log_error "Failed to tag build library ${IBMI_BUILD_LIBRARY}"
+    fi
+
+    log "IBM i build library ${IBMI_BUILD_LIBRARY} created"
+
+    # Write env vars to .bash_env so other processes (such as terminals) can access them
+    echo "export IBMI_BUILD_LIBRARY=\"${IBMI_BUILD_LIBRARY}\"" >> /home/coder/.bash_env
+    echo "export IBMI_BUILD_SCHEMA=\"${IBMI_BUILD_SCHEMA}\"" >> /home/coder/.bash_env
+
+    # Initialize codermake (must run from the build home directory)
+    log "Initializing codermake build in ${IBMI_BUILD_HOME}..."
+    local codermake_out
+    codermake_out=$( (cd "${IBMI_BUILD_HOME}" && codermake -t) 2>&1) || true
+    if [ -n "$codermake_out" ]; then
+        log "$codermake_out"
+    fi
+
+    # Write cleanup script for CMD SIGTERM trap to source
+    # Values are baked in — no conditional check needed since this file is only
+    # written after successful library creation
+    cat > /home/coder/.ibmi_build_cleanup.sh << CLEANUP_EOF
+IBMI_CMD_OUT=\$(ssh -i ${IBMI_KEY} ${IBMI_SSH_OPTS} ${IBMI_USER}@${IBMI_HOST} "qsh -c 'db2 \"DROP SCHEMA ${IBMI_BUILD_SCHEMA} CASCADE\"'" 2>&1)
+if [ \$? -ne 0 ]; then
+    echo "[EXTERNAL-CONN] ERROR: Failed to delete build library ${IBMI_BUILD_LIBRARY}" >&2
+    echo "\${IBMI_CMD_OUT}" >&2
+fi
+CLEANUP_EOF
+}
+
 # Main execution
 main() {
     timing_checkpoint "main: START"
@@ -862,6 +930,12 @@ main() {
         timing_checkpoint "main: Setup script complete"
     fi
 
+    # IBM i build library creation (after repos are updated)
+    # Skip if SKIP_INIT is set (e.g., for follow-up tasks where the library already exists)
+    if [ "$SKIP_INIT" != "true" ]; then
+        setup_ibmi_build_library
+    fi
+
     local exit_code=0
 
     # Update status to indicate initialization is complete